This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065583221972402179/0/3130332e3135322e3138372e302f32342d3234203d3e20313339313339.roa
File: 3130332e3135322e3138372e302f32342d3234203d3e20313339313339.roa (raw, json)
Hash identifier: kCqfJNUXGhTl3zZ3d4DXFlUeQHWwnY2OvVpG1e96QlY=
Subject key identifier: 7F:C0:F6:B8:9F:71:F6:CF:44:35:B1:78:AA:87:24:18:E6:DB:4B:9D
Certificate issuer: /CN=1BF077990B3EF2F79478B657B4C3AF7BDEB8F260
Certificate serial: 26E9E7885D455BEAC8EAF6ACCF3DACDD6DC24C1A
Authority key identifier: 1B:F0:77:99:0B:3E:F2:F7:94:78:B6:57:B4:C3:AF:7B:DE:B8:F2:60
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/1BF077990B3EF2F79478B657B4C3AF7BDEB8F260.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065583221972402179/0/3130332e3135322e3138372e302f32342d3234203d3e20313339313339.roa
Signing time: Tue 20 Jan 2026 02:18:08 +0000
ROA not before: Tue 20 Jan 2026 02:13:08 +0000
ROA not after: Tue 19 Jan 2027 02:18:08 +0000
asID: 139139
IP address blocks: 103.152.187.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065583221972402179/0/1BF077990B3EF2F79478B657B4C3AF7BDEB8F260.crl
rsync://rpki-rps.cnnic.cn/repo/A1065583221972402179/0/1BF077990B3EF2F79478B657B4C3AF7BDEB8F260.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/1BF077990B3EF2F79478B657B4C3AF7BDEB8F260.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 25 Jan 2026 19:40:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
26:e9:e7:88:5d:45:5b:ea:c8:ea:f6:ac:cf:3d:ac:dd:6d:c2:4c:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1BF077990B3EF2F79478B657B4C3AF7BDEB8F260
Validity
Not Before: Jan 20 02:13:08 2026 GMT
Not After : Jan 19 02:18:08 2027 GMT
Subject: CN=7FC0F6B89F71F6CF4435B178AA872418E6DB4B9D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:7b:ec:65:82:12:17:3f:7c:ee:5c:87:32:69:
b1:f5:58:91:4a:89:b9:c6:86:54:9c:96:d4:66:c8:
29:08:f6:01:b5:78:12:f0:e7:cc:e0:4c:ff:20:42:
0a:95:41:60:1a:44:cb:20:15:bc:5b:af:f4:bf:d3:
20:77:08:08:56:13:f3:fc:cd:62:3e:bb:27:98:63:
55:9b:ec:33:ad:60:51:1a:64:89:b3:84:fb:d1:67:
51:36:f7:83:c6:8b:68:94:bf:3b:03:0f:35:52:73:
f2:76:a6:a3:c1:4a:e7:c7:ff:a0:be:6c:05:49:28:
36:8f:6d:5f:23:8e:7b:50:fb:a0:e9:58:65:3a:46:
24:6d:32:2b:19:9d:13:fc:39:5e:f9:7f:58:ec:c5:
76:e1:2c:d5:c9:21:60:be:64:16:63:20:e7:71:44:
2b:57:cd:dd:02:bf:6f:6f:c7:db:f2:09:71:ad:7e:
16:88:a2:de:07:14:71:58:be:72:78:c8:f9:bc:f4:
63:ef:8d:52:7b:6b:e0:c4:18:97:70:03:59:67:f3:
b2:4d:47:38:26:ea:c6:3b:52:2e:eb:91:a9:92:0c:
dd:e8:f7:c7:4d:e6:85:c0:28:b5:d4:cd:33:5a:79:
fa:67:69:9c:90:af:56:a9:86:6a:f4:e8:a6:b7:a1:
f4:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:C0:F6:B8:9F:71:F6:CF:44:35:B1:78:AA:87:24:18:E6:DB:4B:9D
X509v3 Authority Key Identifier:
keyid:1B:F0:77:99:0B:3E:F2:F7:94:78:B6:57:B4:C3:AF:7B:DE:B8:F2:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1065583221972402179/0/1BF077990B3EF2F79478B657B4C3AF7BDEB8F260.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/1BF077990B3EF2F79478B657B4C3AF7BDEB8F260.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065583221972402179/0/3130332e3135322e3138372e302f32342d3234203d3e20313339313339.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.152.187.0/24
Signature Algorithm: sha256WithRSAEncryption
91:91:e5:f5:29:e2:61:26:30:82:33:fe:a9:91:21:47:17:b6:
a9:5a:da:0f:c6:49:c0:ba:2c:05:8c:cd:8f:26:10:79:af:e8:
92:bd:ac:a1:02:f6:34:d8:60:ca:47:d1:44:d2:9d:bf:44:b8:
60:ff:f2:43:95:67:76:51:e2:7e:08:88:ae:56:57:bb:14:1b:
d8:0b:bf:a1:e2:29:80:94:d7:6f:d7:bd:c1:bb:f2:1e:62:bd:
94:f3:46:d7:8d:82:48:1e:9b:9a:b1:4b:81:49:b3:02:74:10:
ce:51:a5:e3:f8:39:6a:0b:80:13:80:d1:db:04:5e:4a:c8:23:
7c:40:09:6c:b8:46:00:1c:0d:23:31:af:94:e9:be:a6:1b:60:
c3:e2:0a:ca:c6:e8:b0:aa:c9:b9:34:8e:d4:ad:83:64:e8:1f:
86:cf:94:eb:63:9a:7f:ae:07:1f:19:4b:88:90:d5:7e:a5:f6:
8d:41:17:c9:02:7d:c0:8d:ab:b9:d0:cd:2d:d7:31:3a:63:55:
fa:4d:54:e7:f7:17:da:b1:ae:9a:80:67:e0:32:40:6c:ca:23:
33:16:1c:c6:7f:db:3d:c3:fe:f0:19:53:6f:53:8e:bd:64:7c:
54:00:cc:68:85:c4:63:30:85:22:9c:10:18:c8:ef:1e:c3:c0:
3c:22:91:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 11:12:55 2026 by rpki-client